ASA- 823 
E4769-01ES 



United States Patent Application 

Title of the Invention 

METHOD FOR DETECTING INVALID ELECTRONIC 
STORAGE MEDIA AND CARD SYSTEM USING THE METHOD 



Inventors 



Manabu MIYATAKE, 



Michio SATO. 




- 1 - 



BACKGROUND OF THE INVENTION 

The present invention relates to a method for 
detecting invalid electronic storage media with 
5 individual identification information (ID) that is 

recognized as an invalid electronic storage medium and to 
a card system using the method. More particularly, the 
present invention relates to a method for detecting an 
invalid card in gate devices such as an automatic ticket 
10 gate wherein IC cards, or smart cards, are used, and to a 
technology that may conveniently be applied to a card 
system. 

An electronic storage medium with individual 
identification information ID that is recognized as an 
15 invalid electronic storage medium is, for example, an 

invalid card. The invalid card refers to a card that has 
not yet expired but its use is prohibited because, for 
example, the user has lost the card. 

Conventionally, a card is checked before use 
20 for validity to prevent the above-mentioned invalid card 
from being used. 

The means that is in practical use today for 
detecting invalid cards include a method in which an 
inquiry about the validity of cards is sent to the host 
25 computer. For example, CAFIS (Credit And Finance 

Information System) is available for use as a method for 
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checking the validity of cards issued from financial 
institutions . 

As a means for detecting invalid cards without 
making an inquiry, there are also methods for detecting 
5 invalid cards by downloading a list of invalid IDs onto a 
terminal and then checking the list for a card that is to 
be examined. One of the methods which check the list for 
a card to be examined uses a hash function. The search 
method with the use of a hash function is disclosed, for 
10 example, in "Information Processing Handbook - New 
^ Edition", Information Processing Society of Japan, pp. 

M; 99, November 25, 1995. 

-4 In the method where a hash function is used for 

ijl detecting invalid cards, a terminal or an IC card 

Mi 15 application unit reads an ID from an IC card and, for the 

q IC card that was read, calculates a hash value using the 

Jj predetermined hash function (This function performs an 

arithmetic operation for dividing IC cards into a 
predetermined groups according to the number of IC cards 
20 or the purpose of IC cards). 

Then, the method checks the by-hash-value hot 
list (black list), which contains invalid IC card IDs 
classified by hash value, to see if the IC card to be 
checked is in the group corresponding to the calculated 
25 hash value. If the group corresponding to the hash value 
contains the ID of the IC card to be checked, the method 
performs invalid card processing; if the group 
corresponding to the hash value does not contain the ID 
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of the IC card to be checked, the method performs valid 
card processing. 

In this way, the method uses the hash function 
to calculate the hash value from the ID of an IC card, 
5 Then, it compares, one at a time, the IDs in the hash 
value group corresponding to the calculated hash value 
listed on the invalid card ID list with the ID of the 
card to be checked to detect if the IC card is an invalid 
card . 

10 SUMMARY OF THE INVENTION 

Recently, cards are used in a variety of 
fields . As they become popular and the number of cards 
increases, the number of invalid cards also increases. A 
need therefore exists for processing a larger amount of 

15 data quickly during invalid card checking processing. 

Conventionally, an attempt has been made to 
reduce the amount of search and to increase the detection 
speed by dividing invalid IC cards into a predetermined 
number of groups with the use of the above-mentioned hash 

20 function. 

However, in the detection method that uses the 
hash function, the hash function that produces hash 
values for evenly distributing invalid cards into 
relatively many hash value groups requires a large amount 
25 of calculation. One of the problems with such a function 
is that the total amount of time for checking a card 
becomes large. For this reason, the conventional 
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technology does not meet the requirements for automatic 
ticket gates used for rail road, bus, airplane, and 
public/entertainment facilities . 

As described above, the by-hash- value hot list 
5 (hereinafter called "hash list") containing invalid card 
IDs is a list containing invalid card IDs grouped by hash 
value. Because cards are not always issued regularly and 
therefore the IDs are not always distributed evenly, 
invalid cards are not always classified into, and 

10 distributed among, the groups evenly. The number of 
invalid cards classified according to the hash value 
varies from group to group, sometimes with many cards in 
a specific group. Thus, the problem is that invalid card 
detection cannot be performed quickly in a group in which 

15 many invalid cards are registered. 

The present invention seeks to solve the 
problems associated with the conventional art described 
above. It is an object of the present invention to 
provide a technology capable of detecting invalid 

20 electronic storage media (invalid cards) quickly. 

The following overviews some of typical 
inventions disclosed in this application. 

A method for detecting invalid electronic 
storage media, each storing therein identification 

25 information recognized as an invalid electronic storage 
medium, registers the individual identification 
information on the invalid electronic storage media as a 
list, the individual identification information being 
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grouped into a plurality of groups; assigns the 
individual identification information and group value 
information to each of the electronic storage media; 
reads the individual identification information and the 
5 group value information in response to a usage request 
for the electronic storage medium; checks one of the 
plurality of groups if the individual identification 
information on the electronic storage medium is 
registered therewith, the one of plurality of groups 
10 corresponding to the group value information that was 

fart 

\Q read; and judges that the requested electronic storage 

h& medium is invalid if the individual identification 

vj information corresponding thereto is found and judges 

jys that the requested electronic storage medium is valid if 

1^2. 15 the individual identification information corresponding 

|=J thereto is not found. It should be noted that the 

'if identification information and the group value 

■J3 information need not be read separately but that they may 

be read at a time. In such a case, the identification 
20 information may be assumed to include both the 
identification information and the group value 
information but, in essence, it is a pair of the 
individual identification information and the group value 
information. It is assumed that individual 
25 identification information (ID) is assigned to each card 
such that the ID is unique. 

A card system comprises a plurality of cards 
each having unique identification information; a card 
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management system for issuing and managing the cards; and 
a card application unit, connected to the card management 
system, for reading data from the card in response to a 
usage request, the card comprising the individual 
5 identification information and group value information 
identifying a group to be searched, the card management 
system comprising card issuance and management means for 
issuing and managing the cards, hot list creation means 
for creating a hot list listing invalid cards, and 
10 communication means for communicating with the card 
03 application unit via the communication line, the card 

M- application unit comprising read means for reading the 

S| individual identification information and the group value 

Iji from the card, by-group list creation means for creating 

15 a by- group list from the hot list distributed from the 
jS; card management system via the communication line, the 

■t{ by-group list grouped by the group value, invalid card 

^ checking means for checking if the card that was read is 

invalid, card processing means for processing the card 
20 based on a result of the invalid card checking means, and 
communication means for communicating with the card 
management system via the communication line. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Pig. 1 is a block diagram showing the 
25 configuration of an IC card system which implements a 

method for detecting invalid electronic storage media in 
accordance with an embodiment of the present invention. 
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FIGS. 2A and 2B are diagrams showing examples 



of the configuration of the hot list 21 shown in FIG. 1 
/''fig. 3 is a diagram showing an example of the 
configuration of the by-hash- value hot list 41 shown in 
FIG . 1 . ^- 

^FIG. 4 is a flowchart illustrating the method 
for detecting invalid cards used in the system shown in 
FIG. 1. 




'TIG. 5 is a flowchart illustrating the card 
10 issuance processing used in the system shown in FIG. 1 




FIG. 6 is a diagram showing the processing of 
hash values 12 during the card issuance processing shown 
in FIG. 5 

^IG. 7 is a flowchart showing card issuance 
15 processing in another embodiment of the present 
invention . 

DESCRIPTION OF THE EMBODIMENTS 

Some embodiments of the present invention will 
be described in detail with reference to the attached 
20 drawings . 

FIG. 1 is a block diagram showing the 
configuration of an IC card system that implements a 
method for detecting an invalid electronic storage medium 
used in one embodiment of the present invention. 
25 The IC card system shown in FIG. 1 comprises an 

IC card management system 20 and an IC card application 
unit 40. The IC card management system 20 issues and 
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manages an IC card 10 and creates an invalid card list 
(hereafter called a hot list). The IC card application 
unit 40 is connected to the IC card management system 20 
via a communication line 30 and reads data from the IC 
5 card 10 either in the contact mode or in the non-contact 
mode for processing. 

The IC card 10 contains therein individual 
identification information (ID) 11 and a hash value 12 
assigned by a card issuance and management unit 22, for 
10 example, in the format "aaaaAA" . When the card issuance 
and management unit 22 issues the IC card 10, it 
calculates the hash value 12 from the ID using a hash 
function . 

The IC card management system 20, composed of 
15 one or more computers, comprises the card issuance and 

management unit 22 that issues and manages the IC card 10 
to which the ID 11 and the hash value 12 are assigned, a 
hot list creation unit 23 that creates a hot list 21 
listing invalid cards, and a communication unit 24 that 
20 communicates with the IC card application unit 40 via the 
communication line 30. Although the IC card management 
system 20 is shown in FIG. 1 as one block, the card 
issuance and management unit 22 and the hot list creation 
unit 23 may be in two separate networked computers which 
25 are remotely located. 

FIGS. 2A and 2B show the configuration examples 
21a and 21b of the hot list 21 described above. 

The hot list 21a shown in FIG. 2A contains 
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combinations of individual identification information 
(ID), "aaaa", "bbbb" , "cccc", and Mddd", of invalid IC 
cards and hash values, "AA", *BB" , and "CC, assigned by 
the IC card management system 20 according to each ID 
5 during card manufacturing or card issuance. An example 
of such a combination is "aaaaAA". 

Two types of information given above, that is, 
"aaaa", "bbbb", "cccc", and "dddd" and "AA" , "BB" , and 
"CC W , schematically represent information. The number of 
10 digits and the format shown above are irrelevant to the 
ijp content of information. The hash values "AA" , "BB" , and 

|Ll n CC" are calculated from the IDs by the card issuance and 

\Ti management unit 22 using the predetermined hash function. 

JJ; These hash values are assigned by the card issuance and 

*_ a 15 management unit 22 during card manufacturing or issuance. 

FIG. 2B shows another configuration example 21b 

S 5 

W of the hot list 21. The hot list 21b contains "aaaa", 

: fi "bbbb", w cccc", and "dddd" that are invalid IC card IDs. 

The hash values of these IDs, if required, may be 
20 calculated by executing the hash function using the IDs. 

Normally, the card issuance and management unit 
22 sequentially assigns the hash values 12 to the IDs 11 
during card issuance. However, when the card issuance 
and management unit 22 finds that there is a bias in the 
25 number of IDs registered with the groups of the hash 
value 12 contained in the hot list 21 and the bias is 
larger than the predetermined limit or when, during a 
regular check (monthly or yearly) for a bias, the card 
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issuance and management unit 22 finds that there is a 
bias and the bias is larger than the predetermined limit, 
it assigns to a newly- issued IC card an ID that will not 
produce the hash value of a group with which many IDs are 
5 already registered so that the IDs are distributed 
equally among the hash values 12. 

The IC card application unit 40 comprises a 
read unit 42 that reads the ID 11 and the hash value 12 
from the IC card 10 , a hash list creation unit 43 that 

10 creates a hash list 41, which is classified according to 
the hash values 12, from the hot list 21 distributed by 
the IC card management system 20 over the communication 
line 30, an invalid card checking unit 44 that checks if 
the card that was read is valid, a card processing unit 

15 45 that processes the IC card 10 based on the result of 
the invalid card checking unit 44, and a communication 
unit 46 that communicates with the IC card management 
system 20 over the communication line 30. 

The IC card management system 20 may distribute 

20 the hot list 21 either at a regular interval or each time 
the hot list 21 is updated. The hot list 21 that is in 
the format of the hot list 21a shown in FIG. 2A may be 
directly downloaded. On the other hand, the hot list 21 
that is in the format of the hot list 21b shown in FIG. 

25 2B must be downloaded and then the hash value must be 
calculated for each ID. 

FIG. 3 is a diagram showing an example of the 
configuration of the above -described hash list 41. 
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As shown In FIG. 3, the hash list 41, created 
based on the hot list 21, contains IDs grouped by hash 
value "AA", "BB" , "CC" , and so on. 

When the user uses the IC card 10, the IC card 
5 application unit 40 reads a pair of the ID 11 and the 
hash value 12 from the IC card 10 and searches the hash 
list 41 with the hash value 12 as the key to check if the 
IC card 10 is invalid. 

Although the embodiment shown in FIG. 1 
10 comprises one IC card application unit 40 and one IC card 
10, it is to be readily understood that there may be a 
plurality of IC card application units and a plurality of 
IC cards . 

Next, how the IC card application unit 40 
15 detects an invalid card will be described below. FIG. 4 
is a flowchart describing how to detect an invalid card. 

As shown in FIG. 4, the method for detecting an 
invalid card used in the embodiment performs the steps 
described below. First, the read unit 42 reads both the 
20 ID 11 and the hash value 12 from the IC card 10 in 

response to an IC card usage request from the user (step 
401). The invalid card checking unit 44 checks the hash 
list 41 for the hash value 12 that was read (step 402). 
If the data corresponding to the hash value 12 includes 
25 the ID 11 of the IC card 10, the card processing unit 45 
performs invalid card processing (step 403); if the data 
corresponding to the hash value 12 does not include the 
ID 11 of the IC card 10, the card processing unit 45 
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performs valid card processing (step 404). Note that the 
ID 11 and the hash value 12 need not be read separately 
but that they may be read at a time- In such a case, the 
ID 11 may be assumed to include both the ID 11 and the 
5 hash value 12 but, in essence, it is a pair of the ID 11 
and the hash value 12. 

As described above, the present invention 
eliminates the need for hash value calculation, making it 
possible to detect invalid cards more quickly than the 
10 conventional method. 

Next, the card issuance processing of the card 
issuance and management unit 22 will be described. 

FIG. 5 is a flowchart showing card issuance 
processing, and FIG. 6 is a diagram illustrating how hash 
15 values 12 are assigned during card issuance processing. 

As shown in FIG. 5, the card issuance and 
management unit 22 gets the number of invalid card IDs 
for each hash value group listed on the hot list 21 
during card issuance processing performed in this 
20 embodiment (step 501). That is, the unit creates a list 
61 similar to the hash list 41. 

Then, the card issuance and management unit 22 
calculates the average of the invalid IDs that are 
registered with each hash value group (step 502). When 
25 the card issuance and management unit 22 issues an IC 

card, it assigns an ID 11 that will produce a hash value 
of a hash value group with which the number of IDs 
smaller than the average are registered (step 503). At 
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this time, the unit may give priority to the hash value 
12 corresponding to the group with which the smallest 
number of IDs are registered and assign that hash value 
to the ID 11. 

Referring now to FIG. 6, the card issuance 
processing mentioned above will be briefly described. 
First, assume that the hash value group n AA" on the list 
61 includes 22 invalid card IDs, that the hash value 
group n BB" includes 2 invalid card IDs, and that the hash 
value group "CC" includes 9 invalid card IDs, 
respectively. In this case, if the hash value of a card 
to be examined is "AA" , the card issuance and management 
unit 22 must search more IDs than it does with the hash 
value "BB" or "CC" and therefore requires more time. 
Therefore, the card issuance and management unit 22 
calculates the average of the IDs in the groups (in this 
example, groups "AA", "BB", and "CC") on the list 61 to 
get the average value of 11. Alternatively, the unit 22 
may count the numbers of the IDs in the groups . The unit 
assigns, not the hash value "AA" , but the hash value "BB" 
or "CC, with which the number of invalid card IDs 
smaller than the average are registered, to the ID of a 
new IC card to prevent the number of IDs to be registered 
with the hash value "AA B from increasing any more. In 
this case, a special priority may be given to the hash 
value "BB" with which the smallest number of IDs are 
registered. In the case where the unit 22 counts merely 
the numbers of the IDs in the groups, ID of a new card 
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will be selected to be assigned to the group having the 
smallest number of IDs. 

This prevents invalid cards from being 
registered with a specific group (hash value W AA" in FIG. 
5 6) but distributes them evenly. 

The above-mentioned card issuance processing 
prevents an increase in the invalid card search time 
caused by registering many entries with a specific hash 
value group, thus allowing an invalid card to be detected 
1 0 more quickly . 
t JJ Referring now to FIGS. 6 and 7, another 

ilT embodiment of the present invention will be described. 

IJ\ The list 61 shown in FIG. 6 contains invalid 

;5; card IDs classified according to the hash values 

15 calculated by the predetermined hash function. However, 
|3 instead of calculating W AA W , "BB", and "CC in FIG. 6 as 

in hash values, the same effect may be obtained by defining 

=S them as a plurality of groups . 

FIG. 7 is a flowchart showing the card 
20 generation processing in this embodiment. With reference 
to the flowchart in FIG. 7, the card generation 
processing executed by the card issuance and management 
unit 22 in this embodiment will be briefly described. 

First, the card issuance and management unit 22 
25 first counts the number of invalid cards (that is, IDs) 
registered with each group listed on the list 61 (step 
701). Then, the unit calculates the average of invalid 
cards per group using the total number of registered 




invalid cards (step 702). The unit assigns a new ID to a 
new IC card and, at the same time, assigns to the new IC 
card the value of a group containing the number of IDs 
smaller than the average, and then issues the new IC 
card. When assigning the group value, a priority may be 
given to the group value with which the smallest number 
of IDs are registered. In addition, in step 703, a new 
group value may be created and assigned as the group 
value of the new IC card. 

In the card issuance processing shown in the 
flowchart in FIG. 7, the group value assigned to an IC 
card cannot be calculated from the ID of the IC card. 
Therefore, the hot list 21 in this embodiment is limited 
to the hot list 21a shown in FIG. 2A. 

The embodiments were described with emphasis on 
IC cards. However, the method for detecting invalid 
cards according to the present invention may also be 
applied to other electronic storage media such as 
magnetic cards. 

The units 22 to 24 and 42 to 46 may be 
implemented as programs that run on a computer. Those 
programs are distributed to the user on various recording 
media such as a floppy disk, CD-ROM, and mask ROM. In 
this case, these programs are sometimes combined with 
other programs such as GUI programs . 

As an alternative means for the above recording 
media, the programs may be available for a fee over 
networks such as the Internet. 
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While the preferred form of the present 



invention has been described, it is to be understood that 
the present invention is not limited to the embodiments 
but that modifications will be apparent to those skilled 
5 in the art without departing from the spirit of the 
present invention . 
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